Malware Analysis CashU.com site compromised ?

[marcopaone]

I got a response from cashu support that the issue is solved, I believe its a false alarm by Kasper. Can you try now?

Yep no notice from ESET

 

[Andrew3000]

I got a response from cashu support that the issue is solved, I believe its a false alarm by Kasper. Can you try now?

Was detected by: Kaspersky, Avast/AVG, Eset, Avira, Bitdefender...
No alert now from Kaspersky.

 

[Divine_Barakah]

Yes, it seems the issue is now resolved.

 

[436880927]

The obfuscated JavaScript was added to the end of the jQuery/Owl Carousel libraries and some other scripts on April 29th on the CASHU servers - and targeting jQuery and Owl Carousel libraries would also be a good attack-point.

Microsoft manually started flagging the scripts after I intentionally put them onto VirusTotal by the morning afterwards. It wasn't an existing detection such as through a generic signature they might have created for something else.

If all of this was genuinely a false positive, why wouldn't CASHU have had more information earlier on for everyone or an explanation as to why all of these issues occurred in the first place?